Is the Security Engineer, Applied Research & Labs role remote?

It's hybrid — Cloudflare expects some on-site time in Hybrid.

How much experience is required?

At least 4 years of relevant experience for this Security Engineer, Applied Research & Labs role.

Where is the role based?

Cloudflare is hiring for this position in Hybrid.

What's the tech stack?

Joblaze extracted these technologies from the posting: AI Gateway, Cloudflare Workers, Durable Objects, Python, TypeScript, Vectorize.

What seniority level is this role?

Cloudflare targets mid-level candidates for this position.

Is this full-time or contract?

Full-time for this Security Engineer, Applied Research & Labs role at Cloudflare.

Security Engineer, Applied Research & Labs at Cloudflare

Joblaze summary

In this role, the Security Engineer focuses on designing and implementing security tooling and workflows for Cloudflare's security teams, while also creating open-source reference implementations and conducting hands-on workshops. Key skills include proficiency in TypeScript or Python, experience with distributed systems, and a solid understanding of application security. This position is ideal for someone with over four years of software engineering experience, particularly in building interactive learning platforms. The role is embedded within a collaborative team that values innovation and practical solutions.

Joblaze insights

Listed 2 days ago — first seen on Joblaze October 14, 2026. Last confirmed on Cloudflare's careers page October 16, 2026.
Python appears in 40.8% of 196 comparable mid security roles in United States; TypeScript appears in 3.6% of 196 comparable mid security roles in United States.

Quick facts

Is the Security Engineer, Applied Research & Labs role remote?: It's hybrid — Cloudflare expects some on-site time in Hybrid.
How much experience is required?: At least 4 years of relevant experience for this Security Engineer, Applied Research & Labs role.
Where is the role based?: Cloudflare is hiring for this position in Hybrid.
What's the tech stack?: Joblaze extracted these technologies from the posting: AI Gateway, Cloudflare Workers, Durable Objects, Python, TypeScript, Vectorize.
What seniority level is this role?: Cloudflare targets mid-level candidates for this position.
Is this full-time or contract?: Full-time for this Security Engineer, Applied Research & Labs role at Cloudflare.

From the original posting

About Us

Available Locations: Austin, TX

What You'll Do

Cloudflare is seeking a Security Engineer to design and build agentic security tooling for Cloudflare Security, and to release that work as open-source reference implementations, interactive labs, and technical workshops for customers and partners.

This role sits in the Applied Research & Labs function within the Office of the CSO. You will work embedded with Cloudflare's security teams, build on Cloudflare's Developer Platform, and represent the team's security & engineering work externally.

Security Tooling & Reference Implementations

Design and build agentic security workflows and tooling for Cloudflare Security, including multi-agent orchestration, tool integration, and evaluation harnesses
Release internal harnesses, skill definitions, and orchestration workflows as documented open-source reference implementations
Implement on Cloudflare Workers, Durable Objects, Workflows, Workers AI, AI Gateway, and the Agents SDK

Labs & Workshops

Define the technical scope and sequencing of each lab, including the failure modes participants will hit and the scaffolding they need
Build and operate the lab infrastructure: per-participant isolation, automated provisioning, state reset, and teardown
Run hands-on workshops where customers and partners build and deploy the tooling themselves
Document and package workshop formats so other Cloudflare engineers can deliver them

External Engagement

Present Cloudflare's agentic security architecture through customer briefings and conference talks
Author technical deep dives and architecture write-ups that establish Cloudflare Security as a recognized voice in the security community
Partner with Product and Engineering to align external technical content with the roadmap

Required Qualifications

4+ years in software engineering, shipping and operating production systems
Demonstrated experience building interactive labs, hands-on learning platforms, or developer training environments, including the infrastructure behind them
Strong design judgment for technical learning experiences, including scope, sequencing, and knowing what to leave out
Proficiency in TypeScript, Python, or a comparable language, with production experience in distributed or event-driven systems
Hands-on experience building LLM-based systems, including agent orchestration, tool use, context engineering, and evaluation
Experience with Cloudflare Workers, Durable Objects, Workflows, Workers AI, AI Gateway, and Vectorize, or an equivalent serverless stack
Working knowledge of application and infrastructure security, including common vulnerability classes and secure development practices
Published technical writing, conference talks, or open-source contributions

Bonus Points

Hands-on security background in any domain
Experience with the Cloudflare Agents SDK
Experience with developer education, technical certification programs, or developer relations
Maintainer or significant contributor to an open-source security or developer tooling project
Experience speaking at security or developer conferences

Location & Travel

Based in Austin, TX
15-25% travel for customer workshops, conferences, and other Cloudflare offices
Occasional work outside standard hours to support sessions across EMEA and APAC time zones

What Makes Cloudflare Special?

Standard company text repeated across Cloudflare's postings is omitted here.